VYPR
Unrated severityNVD Advisory· Published Aug 10, 2026

CVE-2026-68423

CVE-2026-68423

Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy()

mtd_concat_destroy() frees item->concat so calling mtd_virt_concat_put_mtd_devices(item->concat) after that leads to a use-after-free.

Fix it by moving mtd_virt_concat_put_mtd_devices() before mtd_concat_destroy().

Affected products

1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.